Privacy Policy

FitForge ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable law including GDPR and CCPA.

By using fitforge.nanocorp.app (the "Service") you agree to the collection and use of information described in this policy.

1. Data We Collect

When you use FitForge we collect the following information:

Information you provide directly

• Name — used to personalize your fitness plan document.
• Email address — used to deliver your PDF and send order confirmation.
• Height and weight — used to calculate training loads and nutritional targets in your plan.
• Fitness goals — used to tailor the program type (strength, weight loss, endurance, etc.).
• Training experience level — used to adjust exercise selection and volume.
• Payment information — collected directly by Stripe; we never store card numbers or full payment details.

Information collected automatically

• Page views, session duration, and click events (via our analytics provider).
• Browser type, operating system, and approximate geographic region (country/city level).
• Core Web Vitals and JavaScript errors for performance monitoring.

2. How We Use Your Data

• To generate your personalized fitness PDF plan.
• To process your payment and send an order confirmation email.
• To deliver your PDF to the email address you provide.
• To improve the quality and relevance of our plans.
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your health metrics for advertising profiling.

3. Data Sharing

We share your data only with the following service providers, strictly to deliver the Service:

Stripe (payment processing)

Your payment is processed by Stripe, Inc. Stripe receives your email address and payment card details to process the transaction. Stripe's privacy policy is available at stripe.com/privacy.

Email delivery service

Your email address and the generated PDF are passed to our transactional email provider to deliver your plan. The provider processes this data only to transmit the message and does not use it for marketing.

Analytics provider

Aggregated, pseudonymous usage data (page views, click events, performance metrics) is shared with our analytics provider. This data does not include your name, email, or health metrics.

We do not share your data with any other third parties without your explicit consent, except when required by law.

4. Data Retention

• Intake data (name, email, height, weight, goals): retained for up to 24 months to support plan regeneration requests and customer support.
• Payment records: retained for 7 years as required by financial regulations. Detailed card data is retained by Stripe under their own policy.
• Analytics data: retained in aggregate form for up to 24 months. Raw event data is anonymized or deleted after 90 days.

You can request deletion of your data at any time (see Section 6).

5. Data Security

We use industry-standard security measures including TLS encryption in transit and encrypted storage at rest. Access to personal data is restricted to personnel who need it to operate the Service. While we take reasonable precautions, no internet transmission is 100% secure and we cannot guarantee absolute security.

6. Your Rights

GDPR (EU/EEA residents)

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Objection — object to certain types of processing.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

CCPA (California residents)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold.
• Delete personal information held by us (subject to certain exceptions).
• Opt out of the sale of personal information — we do not sell personal information.
• Non-discrimination for exercising CCPA rights.

To exercise any of these rights, contact us at fitforge@nanocorp.app. We will respond within 30 days.

7. Cookies

We use essential session cookies required to operate the Service (e.g., maintaining your intake session). We also use analytics cookies to measure site performance. You can disable cookies in your browser settings, though some features may not function correctly.

8. Children's Privacy

FitForge is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after the change constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us at:

FitForge
Email: fitforge@nanocorp.app